$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft File: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft (raw, json) Hash identifier: wtSe1fH71UyIlPOCaN6WsNSPtzbO9CL1aIH7XKOoFTQ= Subject key identifier: 74:AA:7B:83:0E:11:96:E6:B2:9B:B7:2D:B8:99:7B:57:D4:E2:5F:B8 Authority key identifier: 30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 Certificate issuer: /CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Certificate serial: 7A77CCAB8F70785972DB5E44C94A16D9DCDC6D65 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft Manifest number: 0145 Signing time: Sun 11 May 2025 01:36:48 +0000 Manifest this update: Sun 11 May 2025 01:31:48 +0000 Manifest next update: Mon 12 May 2025 05:04:48 +0000 Files and hashes: 1: 326130613a363034303a623166383a3a2f34382d3438203d3e203530373535.roa (hash: FI47MURWTFWikQVohyPC3i+m6GkNNvGpYuxpgU2LP/Q=) 2: 326130613a363034303a623166333a3a2f34382d3438203d3e203530373535.roa (hash: 92+lsmyfA1dbS5hvoEPYQjapfeES/k8FUYGANJUnv7Q=) 3: 326130613a363034303a623166313a3a2f34382d3438203d3e20323030363736.roa (hash: MYzoD8wbCOxI3VM/BdbUpxOg1cHoSa/pKdV7AMYn73k=) 4: 309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl (hash: UNny765f0lHq6FesXkG+TcSJocjSnSTYjf11/l4a6Ik=) 5: 326130613a363034303a623166323a3a2f34382d3438203d3e20323030363736.roa (hash: Iz/fbYS1/cy8A5fLPahpzYYMJ+9YAFFxOvqGD55PuMM=) 6: 326130613a363034303a623166353a3a2f34382d3438203d3e20323030363736.roa (hash: LBWSPbWdHS2qLW48sBVvajPcn95MUvX0AUIFyg2pSwE=) 7: 326130613a363034303a623166333a3a2f34382d3438203d3e20323030363736.roa (hash: w5dnEiDx5goNVTXWdKgSFg9sD6RUplNurP3xamwPNaQ=) 8: 326130613a363034303a623166363a3a2f34382d3438203d3e203530373535.roa (hash: WZAT+2UnkuTeDpADo9xuR0pPXroOCLJbbHfxikcVv24=) 9: 326130613a363034303a623166303a3a2f34382d3438203d3e20323030363736.roa (hash: dOsy+R+Pu+oAZfnInfj1QRHz0MdLjsjFwXGn7V3VRV4=) 10: 326130613a363034303a623166373a3a2f34382d3438203d3e203530373535.roa (hash: cKtVijhwYzD8lUknL4bLGAreJBVYSaklclbPuDAhlM4=) 11: 326130613a363034303a623166343a3a2f34382d3438203d3e20323030363736.roa (hash: Nnbe/4zszjgo0YB55Fou4Wds93r5DpKEFbS0MZw1LSo=) 12: 326130613a363034303a656430303a3a2f34302d3430203d3e2030.roa (hash: vmCZ6eOm5tS7bNiPnlTdd4xzZjSjYpY8TXILOA0OmSc=) 13: 326130613a363034303a623166663a3a2f34382d3438203d3e2030.roa (hash: cwd5LxUfGqT7a9/Pajk8lfNPUrL3p3IC+JEphw9tMJU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 19:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:77:cc:ab:8f:70:78:59:72:db:5e:44:c9:4a:16:d9:dc:dc:6d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309C25E7B18FF28A60B96B25572F8A9E3104FE76 Validity Not Before: May 11 01:31:48 2025 GMT Not After : May 12 05:04:48 2025 GMT Subject: CN=74AA7B830E1196E6B29BB72DB8997B57D4E25FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:41:40:e3:0d:8b:0b:e4:22:d9:81:39:66: 68:dc:a8:01:36:9e:c0:1d:f6:a7:f9:67:2b:bc:36: 69:3a:7e:01:db:da:61:44:19:94:70:2b:fd:63:28: 3c:9f:47:5a:19:0c:ea:ec:f9:b0:87:db:27:dd:ce: 23:05:35:28:64:7d:87:5c:df:17:7b:fc:63:f7:1c: f0:20:41:18:1f:c3:c5:13:f9:ab:36:4c:77:4d:e6: 31:1d:03:ec:9e:4a:88:5a:09:8e:6c:b1:41:83:15: 0d:02:cd:5d:6f:21:48:9d:8c:d4:40:6b:5b:ca:d8: 60:a0:94:cd:67:fd:77:cd:90:1c:a1:98:0e:36:3c: f5:90:f8:59:eb:c3:50:59:c3:af:af:bc:72:7f:e5: 16:b4:21:f9:5c:5f:c5:46:b8:d5:cb:6d:c3:2c:4c: 74:ed:5f:f9:14:83:f7:f0:39:eb:fa:ba:0b:8c:d4: b6:f3:19:9b:9b:b1:b4:80:6e:3c:cf:20:92:e9:35: 23:bc:b9:ef:df:81:0a:0e:00:c7:25:68:90:86:79: 40:42:8e:9a:86:28:0d:b6:87:78:29:ec:2d:5c:c5: b0:06:e7:b4:3f:04:8b:e7:af:b2:63:81:34:60:ff: 32:10:b8:03:cd:90:86:dd:05:55:f6:9f:99:3f:66: 80:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:7B:83:0E:11:96:E6:B2:9B:B7:2D:B8:99:7B:57:D4:E2:5F:B8 X509v3 Authority Key Identifier: keyid:30:9C:25:E7:B1:8F:F2:8A:60:B9:6B:25:57:2F:8A:9E:31:04:FE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/0/309C25E7B18FF28A60B96B25572F8A9E3104FE76.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c5:75:59:d5:ff:54:d1:52:74:15:87:3c:22:e6:2b:8b:7f: 1f:75:6e:07:be:96:74:c2:82:e8:5e:fd:79:1c:4d:35:86:b3: c6:43:53:b2:c4:b4:ab:9d:e3:6f:01:53:fc:de:57:94:eb:44: a8:e9:35:7a:4b:09:4b:09:1d:67:8b:83:b5:b4:ec:c9:73:d0: 69:ff:8e:8b:2b:49:ad:c0:3a:fe:22:34:cd:95:8e:d8:de:93: d9:5c:99:47:97:fd:6f:13:fd:85:ac:01:07:9e:ea:21:63:e8: 28:c1:4e:dc:67:1c:c9:c6:17:8c:ac:c9:09:52:db:ff:1e:60: 7c:f2:fe:03:57:19:fd:e6:a6:d8:c4:8e:27:34:52:83:cf:45: 1e:43:a5:9e:6b:8d:fc:d5:3d:e9:25:51:f9:1c:67:77:61:e8: 9f:3f:7a:e1:7d:35:d2:22:93:91:27:e6:2c:1e:8e:a9:22:d7: 20:8b:c3:21:60:5b:1f:ef:d0:58:93:b9:92:bc:49:ce:17:59: b7:d4:ef:67:9e:74:44:31:c2:f6:8f:e9:03:e9:09:c1:29:b8: 52:54:d3:17:b4:62:6d:bf:14:fc:a0:0d:cb:52:3e:73:65:22: 14:d0:18:ff:ed:31:e8:2b:13:e8:11:3b:37:fe:44:52:60:f9: ed:ca:d2:c6 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUenfMq49weFly215EyUoW2dzcbWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUz MTA0RkU3NjAeFw0yNTA1MTEwMTMxNDhaFw0yNTA1MTIwNTA0NDhaMDMxMTAvBgNV BAMTKDc0QUE3QjgzMEUxMTk2RTZCMjlCQjcyREI4OTk3QjU3RDRFMjVGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVEFA4w2LC+Qi2YE5ZmjcqAE2 nsAd9qf5Zyu8Nmk6fgHb2mFEGZRwK/1jKDyfR1oZDOrs+bCH2yfdziMFNShkfYdc 3xd7/GP3HPAgQRgfw8UT+as2THdN5jEdA+yeSohaCY5ssUGDFQ0CzV1vIUidjNRA a1vK2GCglM1n/XfNkByhmA42PPWQ+Fnrw1BZw6+vvHJ/5Ra0IflcX8VGuNXLbcMs THTtX/kUg/fwOev6uguM1LbzGZubsbSAbjzPIJLpNSO8ue/fgQoOAMclaJCGeUBC jpqGKA22h3gp7C1cxbAG57Q/BIvnr7JjgTRg/zIQuAPNkIbdBVX2n5k/ZoAXAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUdKp7gw4Rluaym7ctuJl7V9TiX7gwHwYDVR0j BBgwFoAUMJwl57GP8opguWslVy+KnjEE/nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzMwOUMyNUU3QjE4RkYy OEE2MEI5NkIyNTU3MkY4QTlFMzEwNEZFNzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1Y2U3 LzAvMzA5QzI1RTdCMThGRjI4QTYwQjk2QjI1NTcyRjhBOUUzMTA0RkU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEvFdVnV/1TRUnQVhzwi5iuLfx91bge+lnTCguhe/XkcTTWGs8ZDU7LE tKud428BU/zeV5TrRKjpNXpLCUsJHWeLg7W07Mlz0Gn/josrSa3AOv4iNM2Vjtje k9lcmUeX/W8T/YWsAQee6iFj6CjBTtxnHMnGF4ysyQlS2/8eYHzy/gNXGf3mptjE jic0UoPPRR5DpZ5rjfzVPeklUfkcZ3dh6J8/euF9NdIik5En5iwejqki1yCLwyFg Wx/v0FiTuZK8Sc4XWbfU72eedEQxwvaP6QPpCcEpuFJU0xe0Ym2/FPygDctSPnNl IhTQGP/tMegrE+gROzf+RFJg+e3K0sY= -----END CERTIFICATE-----Generated at Sun May 11 04:08:38 2025 by rpki-client